SPECIFICATION 

Intermediate device which can be introduced and removed in seamless way 
Technical field: 

The present Invention relates to an intermediate device for being 
5 logically inserted into a network between information processing apparatus 
typified by a client and a server, and more particularly to an intermediate 
device for providing a new service which expands the services already 
available from information processing apparatus in an environment wherein 
the information processing apparatus temporarily hold information inherent in 
10 communications and communicate with each other using such information. 
Background art: 

A plurality of information processing apparatus communicate with 

each other through a network to provide services between the information 

processing apparatus. 
15 For example, in a client/server system, a client and a server 

communicate with each other so that the server provides a service and the 

client uses the service. 

The client/server system occasionally has service providing 

architectures changed to improve services provided by servers, to associate 
20 servers with each other to provide a service of a certain type, and to transfer 

a service provided by a server to another server. An intermediate device is 

employed to change service providing architectures. 

A peer-to-peer system comprises a plurality of information processing 

apparatus called peers. A peer is not assigned a fixed role as a client or a 
25 server, but has its role changed depending on the situation. As with the 

client/server system, the peer-to-peer system has peers communicating with 
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each other so that a peer provides a service and another peer uses the 
service. The peer-to-peer system also needs to change service providing 
architectures, and an intermediate device is employed to change service 
providing architectures. 
5 In order to realize services in these systems, the systems may employ 

a communication protocol having a procedure for information processing 
apparatus to exchange and hold state information inherent in communication 
sessions and to communicate with each other using the state information. 
A typical system wherein a client and a server exchange and hold 
10 inherent state information for a certain period of time, and communicate with 
each other using the state information, employs a protocol as a de facto 
standard such as NFS (Network File System) or CIFS (Common Internet File 
System). 

These communication protocols are used for remote file access for 
15 accessing storage resources of a server from a client. Using such a 

communication protocol, the client can easily use the storage resources of 
the server as if accessing storage resources within itself (see Japanese laid- 
open patent publication No. 2003-203029 and W. Katsurashima, S. 
Yamakawa, T, Torii, J. Ishikawa, Y. Kikuchi, K. Yamaguti, K. Fuji! and T. 
20 Nakashima, "NAS Switch: A Novel CIFS Server Virtualization," Processings 
of 12th IEEE/nth NASA Goddard Conference on Mass Storage Systems & 
Technologies, April, 2003). 

Japanese laid-open patent publication No. 2003-203029 proposes a 
process of integrating storage resources of a plurality of servers as if they 
25 are a single storage resource and providing it to a client in an NFS protocol 
environment. According to the proposed process, a switch device for 
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changing and transferring information in communication packets is 
introduced between a client and a server for thereby providing storage 
resources of a plurality of servers as if they are a single storage resource to 
the client without the need for special software or hardware introduced into 
5 the client and the server. 

The article by W. Katsurashima, et al. proposes a switch apparatus 
for integrating storage resources of a plurality of servers without the need for 
special software or hardware introduced into a client and a server in an 
environment employing a CIFS protocol as with the NFS protocol 

10 environment. 

According to the above proposals, services provided by a group of 
servers that do not have an interlinking function can be integrated by 
providing an intermediate device typified by a switch apparatus in a network 
between a client and servers. Therefore, the client or the user of the client 

1 5 can easily use services provided by the servers without concern over the 
architecture of the server group. The system administrator can perform 
maintenance work for adding or removing a server or transferring resources 
between servers without changing client settings and stopping applications 
depending on the operating situation of the system and the services. 

20 Another typical system wherein a client and a server exchange and 

hold Inherent state information for a certain period of time, and communicate 
with each other using the state information, employs HTTP (Hyper Text 
Transfer Protocol), According to the HTTP, the client can use Web contents 
stored in the server. The client requests the server for the Web contents, 

25 and the server provides the Web contents to the server. An intermediate 
device having a function to distribute requests from the client to appropriate 
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servers is called a Web switch or a layer 7 switch. 

The intermediate device of the above type distributes requests 
depending on the locations where Web contents are stored, thereby 
Integrating a plurality of servers to make them look like one Web server to 
5 clients. Therefore, if Web servers are classified according to differently 
processed Web services such as contents using CGI and contents using 
COOKIE, then processing loads based on requests from clients can be 
distributed, and servers having capabilities that match the processing loads 
can be installed as respective Web servers for performing distributed 

10 processes. Consequently, Web services themselves can stably be run by 
efficiently constructing systems at Web sites and changing systems 
depending on the changing situation. 

Services that are provided by an intermediate device, such as 
services for distributing remote file access from a client to a plurality of 

1 5 servers and services for distributing Web service access from a client to a 
plurality of Web servers, will hereinafter referred to as intermediate device 
provided services. 
Disclosure of the invention: 

In a system using the above intermediate device, it is preferable that 

20 the intermediate device be installed between clients and servers, 

destinations to be accessed by clients be set as the intermediate device, and 
clients start communications through the Intermediate device. According to 
such system configurations, server systems can be changed and resource 
allocations can be changed without changing client settings and stopping 

25 applications. 

However, such changes may not necessarily be possible in some 
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cases. For example, if an intermediate device is to be newly introduced 
when a certain service has been started between a client and a server, then 
it is necessary to temporarily stop applications and change client settings In 
order to change the server system and change resource allocations. 
5 A client and a server communicate with each other while exchanging 

and holing inherent state information of each other. For newly introducing an 
intermediate device which provide services, It Is necessary to temporarily 
stop applications on the client thereby cutting off communications between 
the server and the client, and then change the destination to be connected 

10 by the client from the server to the intermediate device. 

For removing an Intermediate device connected between a client and 
a server, it is also necessary to temporarily stop applications run on the client 
thereby cutting off communications between the server and the client, and 
then change the destination to be connected by the client from the 

15 intermediate device to the server, as when the Intermediate device is to be 
introduced. Removing an intermediate device may be replacing the 
intermediate device or getting rid of the intermediate device which has been 
used for a temporary application. A temporary application may be to replace 
an existing server or to use an intermediate application temporarily for 

20 integrating services provided by a plurality of servers into services on a 
single server. 

It is an object of the present invention to provide an intermediate 
device which can seamlessly be newly introduced and removed without 
stopping applications run on a client or changing settings of a destination to 
25 be connected by a client. 

To achieve the above object, an intermediate device according to the 
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present invention is adapted to be provided between a first information 
processing device for providing an Information processing service through a 
network and a second information processing device for receiving the 
information processing service, for providing an intermediate service 
5 additional to the information processing service. The intermediate device 
has a state information acquiring means, an Intermediate service managing 
means, and a transfer control meSans. 

The state information acquiring means acquires state information 
required to maintain the state of a session established between the first 

10 information processing device and the second information processing device 
for the information processing service, from the first information processing 
device or the second information processing device. 

The intermediate service managing means generates, based on the 
state information, transfer rules for applying the intermediate service to data 

15 of the information processing service which is sent and received between the 
first information processing device and the second information processing 
device, and transferring the data to which the intermediate service is applied. 

The transfer control means maintains the state of the existing session 
established between the first information processing device and the second 

20 information processing device, between itself and the second information 
processing device, establishes a new session between itself and the first 
information processing device, and transfers the data using the existing 
session and the new session, according to the transfer rules. 
Brief description of the drawings: 

25 Fig. 1 is a block diagram showing an arrangement of a system 

according to an embodiment of the present invention; 
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Fig. 2 is a block diagram showing an arrangement of an intermediate 
device; 

Fig. 3 is a flowchart showing the flow of a process carried out when 
the intermediate device is introduced according to procedure 1 ; 
5 Fig. 4 is a flowchart showing the flow of a process carried out when 

the intermediate device is introduced according to procedure 2; 

Fig. 5 is a flowchart showing the flow of a process carried out when 
the intermediate device is introduced according to procedure 3; 

Fig. 6 is a flowchart showing the flow of a process carried out when 
10 the intermediate device is removed; 

Fig. 7 is a block diagram showing an arrangement of a system 
according to a first embodiment of the present invention; 

Fig. 8 is a table showing an example of file handles of NFS servers 
according to an NFS protocol; 
15 Fig. 9 is a block diagram showing an arrangement of a system 

according to a third embodiment of the present invention; and 

Fig. 10 Is a block diagram showing an arrangement of a system 
according to a fourth embodiment of the present invention. 
Best mode for carrying out the invention: 
20 Embodiments of the present invention will be described In detail below 

with reference to the drawings. 

Fig. 1 is a block diagram showing an arrangement of a system 
according to an embodiment of the present invention. As shown in Fig. 1 , 
the system has client 100, intermediate device 200, servers 300, 301 , and 
25 network switch 150. Although one or two units of each device are illustrated 
in Fig. 1 , the number of units of each device is optional. 
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Each of client 100, intermediate device 200, and servers 300, 301 has 
an interface for network connections in order to communicate with other 
devices. Intermediate device 200 is connected to network 1 , client 100 to 
network 2, server 300 to network 3, and server 301 to network 4. Networks 1 
5 through 4 are connected to respective ports of network switch 150. This 
configuration of the system allows client 100, intermediate device 200, and 
servers 300, 301 to communicate with each other. 

The network configuration shown in Fig. 1 is illustrated by way of 
example only, and the present invention is not limited thereto. Intermediate 
10 device 200 may be installed at least logically between client 100 and servers 
300, 301 , and may be installed physically between client 100 and servers 
300, 301. 

Servers 300, 301 can provide a service for allowing client 100 to make 
use of WEB pages through the networks or an information processing 

15 service including a service for allowing client 100 to access file data. The 
service provided by the sen/ers will hereinafter be referred to as "information 
processing service". 

Client 100 can access servers 300, 301 and use the information 
processing service provided by servers 300, 301 . 

2 0 Network switch 1 50 has a function to transfer communication packets 

between the ports and also a function to copy and transfer communication 
packets, typically known as port mirroring. Port mirroring is a function for 
transferring communication packets transferred to a certain route also to 
another route. 

25 Intermediate device 200 is installed between clients 100 and servers 

300, 301 , and provides an additional service for transferring communication 



packets therebetween and enhancing the information processing service 
provided by the servers. Fig. 2 is a block diagram showing an arrangement 
of intermediate device 200. 

As shown in Fig. 2, intermediate device 200 comprises network 
5 interface 201 , packet transfer control unit 202, Intermediate device providing 
service management unit 203, session monitoring unit 204, session 
cancellation control unit 205, and information collecting unit 206. 

Packet transfer control unit 202 reconfigures packets or recombines 
headers, and transfers the data between client 100 and servers 300, 301. 

1 0 The transfer process that is performed by packet transfer control unit 202 is 
determined by a protocol handled by the intermediate device, services 
provided by the intermediate device (hereinafter referred to as "intermediate 
device providing services"), and settings that have been made by the 
operator for the intermediate device providing services. The intermediate 

15 device providing services that the present invention handles include services 
of various contents. 

The contents of the intermediate device providing services may be set 
by the operator. Examples of operation will be given below. If no 
intermediate device providing services are provided, then packet transfer 

20 control unit 202 only transfers packets between client 1 00 and servers 300, 
301 . If the intermediate device providing services are provided, then packet 
transfer control unit 202 transfers packets between client 100 and servers 
300, 301 according to the transfer rules thereof. At this time, packet transfer 
control unit 202 may change the headers of communication packets and 

2 5 transfer the data, or may extract data sent with communication packets and 
transfer the extracted data with new communication packets. The 
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intermediate device providing services are additional services that are 
provided by servers 300, 301 for the information processing service, and are 
provided by intermediate device 200. The transfer destination to which the 
data are transferred may not necessarily be the same as a transmission 
5 destination specified by the transmission source. 

The intermediate device providing services are realized by 
intermediate device 200 when it manipulates the transfer destination of data 
between client 100 and servers 300, 301 , the header, or the data. 
Therefore, certain transfer rules are necessary to provide the intermediate 

10 device providing services. The transfer rules represent regulations with 
respect to data transfer for realizing the transfer process that is determined 
as described above. An example of the intermediate device providing 
services is a service for controlling intermediate device 200 to distribute 
accesses from client 100 appropriately to a plurality of servers 300, 301 for 

1 5 thereby integrating the plurality of sen/ers 300, 301 as it they look like a 
single server to client 100. 

Intermediate device providing service management unit 203 controls 
the providing of the Intermediate device providing services. Specifically, 
intermediate device providing sen/ice management unit 203 determines a 

20 process to be performed by packet transfer control unit 202, session 
monitoring unit 204, session cancellation control unit 205, or information 
collecting unit 206, based on the settings made by the operator for the 
intermediate device providing services, and instructs the unit to perform the 
process. For example, intermediate device providing service management 

25 unit 203 determines transfer rules based on the information collected by 
session monitoring unit 204 and information collecting unit 206 and the 
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settings made by the operator, and instructs packet transfer control unit 202 
to transfer data according to the transfer rules. 

Session monitoring unit 204 monitors the state of a session 
established between client 100 and servers 300, 301 , and collects session 
5 information required to start the intermediate device providing services from 
data that are exchanged in the session. The session information refers to 
inherent state information relative to the session of each communication, and 
is effective with respect to the session only during a period in which the 
session is established. If intermediate device 200 is introduced seamlessly 

10 between server 300 and client 100 and starts the intermediate device 

providing services, intermediate device 200 maintains the state of a session 
that has been maintained between server 300 and client 100 so far. 
Therefore, the intermediate device needs to acquire state information 
required to maintain the state of the session, 

15 If intermediate device 200 handles a protocol having a function to 

initialize sessions, then session cancellation control unit 205 can send a 
command to client 100 and servers 300, 301 for initializing the session that 
has already been established therebetween. For example, session 
cancellation control unit 205 may send a command for forcibly nullifying the 

20 session. When client 100 and servers 300, 301 execute the command, the 
session is nullified. Initializing a session refers to nullifying the existing 
session and reestablishing a new session that takes over the state of the 
existing session. 

Information collecting unit 206 collects service inherent information 
2 5 required to start the intermediate device providing services seamlessly from 
client 100 and servers 300, 301 through the networks, and sends the service 
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inherent information together with the session infornnation collected by 
session monitoring unit 204 to intermediate device providing service 
management unit 203. The service inherent information refers to state 
information inherent in the information processing service provided by the 
5 sen/ers, and is commonly used by a plurality of sessions. 
(Procedures for introducing the intermediate device) 

There are three procedures, shown below, for introducing 
intermediate device 200, depending on the network protocol that is used, the 
intermediate device providing services, and the system environment that is 
10 applied. Intermediate device 200 may be introduced according to either one 
of the procedures, or intermediate device 200 may be introduced according 
to a procedure which Is a combination of plural procedures depending on the 
system to which intermediate device 200 is applied. 
(Procedure 1) 

15 A procedure for introducing intermediate device 200 seamlessly when 

a session has already been established between client 1 00 and server 300 
and they have been communicating with each other through networks 2, 3 
will be described below. It is assumed that server 301 is added at the same 
time that intermediate device 200 is introduced. It is also assumed that 

20 configurational settings and execution detail settings with respect to the 

intermediate device providing services to be provided by intermediate device 
200 have been registered in advance in intermediate device 200 by the 
operator such as the system administrator. The information set and 
registered by the operator is managed by intermediate device providing 

2 5 service management unit 203. 

An environment to which procedure 1 is applied is that events relative 
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to the information processing service run on client 1 00 and server 300 can 
be known or cannot be known by the third party fronn session information. 
Intermediate device 200 attempts to acquire necessary session information. 
If intermediate device 200 is unable to acquire all necessary session 
5 information, then the session that has been established before intermediate 
device 200 is Introduced cannot be recreated after intermediate device 200 
is introduced. For example, the session that has already been established 
between client 100 and server 300 before intermediate device 200 is 
introduced may be encrypted by negotiations between client 100 and server 
10 300. In such a case, intermediate device 200 is unable to recreate the 
session because it cannot understand the information exchanged in the 
session. 

Fig. 3 is a flowchart showing the flow of a process carried out when 

the intermediate device is introduced according to procedure 1 . The 
15 procedure shown in Fig. 3 begins when a session has already been 

established between client 100 and server 300 and they have been 

communicating with each other through networks 2, 3. 

Intermediate device providing service management unit 203 

generates a list of information that is required to be acquired to perform 
20 intermediate device providing services (hereinafter referred to as "required 

information list") from service settings specified by the operator, and 

registers the required information list in session monitoring unit 204 (step 

S1). 

For example, if the protocol handled by intermediate device 200 is 
25 TCP (Transmission Control Protocol), then intermediate device providing 
service management unit 203 determines a required information list for 
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performing services, as follows: 

When a session (referred to as "connection" according to TCP) is 
established between client 100 and server 300, each of client 100 and server 
300 adds a sequence number to a communication packet of data and sends 
5 the communication packet. When client 1 00 or server 300 which has 
received the communication packet with the sequence number added 
thereto responds to the communication packet, it counts up the sequence 
number added to the received packet by "1 and adds the sequence number 
to a responding communication packet. When client 100 or server 300 

1 0 receives the responding communication packet, it refers to the sequence 
number added thereto and confirms that the communication packet sent 
thereby reached the other party. TCP also includes a function to control the 
amounts of data stored in reception buffers of client 100 and server 300 and 
the state of a session such as the establishment (beginning) or the 

15 cancellation (ending) of the session. 

For intermediate device 200 to be introduced seamlessly between 
client 100 and server 300 and to transfer communication packets in the TCP 
session, intermediate device 200 is required to collect the sequence number, 
the amounts of data stored in the reception buffers, and the session state 

20 from the session information, and to add session information for not causing 
a mismatch before and after communication packets are transferred, to 
communication packets to be transferred. The information that is required 
by intermediate device 200 represents information about the sequence 
number, the amounts of data stored in the reception buffers, and the session 

25 state. 

When the required information is determined, intermediate device 200 
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and server 301 are newly connected to network switch 150. The system now 
takes on the physical arrangement shown in Fig. 1 . 

Network switch 150 has been set to transfer communication packets 
flowing between networks 2, 3 to network 1 of intermediate device 200, using 
5 the function to copy and transfer communication packets as described 

above. When communication packets are transferred to intermediate device 
200, data packets obtained through network interface 201 are sent to 
session monitoring unit 204. 

Session monitoring unit 204 analyzes session information transmitted 

10 in the existing session that has been established between client 100 and 
server 300, and extracts session information that is in conformity with the 
acquired information list registered by intermediate device providing service 
management unit 203. Session monitoring unit 204 then sends the session 
information in association with the event of the information processing 

1 5 service that has been provided from server 300 to client 1 00, to intermediate 
device providing service management unit 203 (step S2). 

Intermediate device providing service management unit 203 
determines whether all the information set forth in the acquired information 
list can be acquired from a session group that has been established before 

20 intermediate device 200 is introduced or not (step S3). 

If all the Information can be acquired, then intermediate device 
providing service management unit 203 acquires the information, generates 
transfer rules for appropriately transferring communication packets from the 
acquired information and settings specified by the operator, and registers the 

2 5 transfer rules in packet transfer control unit 202 (steO S4). At this time, 
however, the transfer rules are simply registered, but not effective yet. 
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The route of communication packets flowing on the session is 
changed from a route extending from client 100 directly to server 300 to a 
route extending from client 100 through intermediate device 200 to server 
300. At this time, a process depending on the configurations of the networks 
5 connected to network switch 150, which are provided by changing settings of 
network switch 150 and changing the IP address of intermediate device 200 
or server 300, is employed. 

When communication packets are routed through intermediate device 
200, the communication packets that are sent from client 100 to server 300 

10 In the existing session go through network interface 201 to packet transfer 
control unit 202 in intermediate device 200. Intermediate device 200 
establishes a new session between intermediate device 200 and server 300, 
transfers data of communication packets from client 100 using the new 
session established between intermediate device 200 and server 300, and 

1 5 maintains the session based on the session information acquired in advance 
so that the session established before intermediate device 200 is introduced 
will not be cut off (step S5). 

Intermediate device providing service management unit 203 
additionally registers new transfer rules in packet transfer control unit 202 in 

2 0 order to achieve matching between the session information between client 
100 and Intermediate device 200 and the session information between 
intermediate device 200 and server 300. 

When transfer rules are completed for all the sessions established 
before intermediate device 200 is introduced and data can be transferred 

25 with matching achieved between two sessions, intermediate device providing 
service management unit 203 instructs packet transfer control unit 202 to 
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make effective the transfer rules that have been registered in advance. 
Packet transfer control unit 202 starts transferring data according to the 
transfer rules, thereby starting to provide intermediate device providing 
services. 

5 After intermediate device providing services have begun, when a need 

arises to transfer an access from client 100 to newly introduced server 301 
according to the transfer rules, intermediate device 200 establishes a new 
session between intermediate device 200 and server 301 , and transfers data 
(step S6). At this time, intermediate device 200 transfers data between the 

10 session between client 100 and intermediate device 200 and the session 
between intermediate device 200 and server 301 , or between the three 
sessions further including the session between intermediate device 200 and 
existing server 300, and maintains those sessions. 

As described above, intermediate device 200 generates transfer rules 

15 using the acquired session information, takes over the state of the existing 
session between itself and client 100, establishes a new session between 
Itself and server 300, and transfers data using the existing session and the 
new session. Therefore, intermediate device 200 is seamlessly introduced 
to start providing intermediate device providing services without causing the 

20 user of client 100 to be concerned about the Introduction of intermediate 
device 200. 

If the required information cannot be acquired in step S3, then 
intermediate device providing service management unit 203 instructs packet 
transfer control unit 202 to transfer communication packets in the session 
25 established before intermediate device 200 is introduced and maintain the 
session. The required information cannot be acquired if the session 
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information cannot be decoded because it is encrypted. If there is a request 
to establish a new session from client 100, then intermediate device 
providing service management unit 203 establishes a session between itself 
and client 100, establishes a session between itself and server 300, and 
5 instructs packet transfer control unit 202 to transfer data between those 
sessions (step S7). 

As a result, only the session in which intermediate device 200 
transfers data between two sessions, i.e., only the session established after 
intermediate device 200 is introduced, is subject to the intermediate device 

1 0 providing services. 

If the session needs to be encrypted at this time, then intermediate 
device 200 performs an encrypting authentication when it establishes a new 
session, establishes a session between itself and client 100, and establishes 
a session between itself and server 300, thereby making it possible to 

15 transfer data between the two sessions. 

After the Intermediate device providing services have begun, when a 
need arises to transfer only a session newly established by a request from 
client 100 to server 301 , Intermediate device 200 establishes a new session 
between itself and server 301 , and transfers data (step S8). Since a session 

20 is normally not continued for an indefinite period of time, all sessions will 
eventually be subject to the Intermediate device providing services. 

As described above, if all required state information cannot be 
acquired, then intermediate device 200 starts intermediate device providing 
services without having the existing session subject thereto, and continues 

25 the existing session. Consequently, while the service provided so far is 
being continuously provided all the way to the user of client 1 00 which has 
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received the information processing service in the existing session, 
intermediate device 200 is seamlessly introduced to start the intermediate 
device providing services. 
(Procedure 2) 

5 As with procedure 1 , a procedure for introducing intermediate device 

200 seamlessly when a session has already been established between client 
100 and server 300 and they have been communicating with each other 
through networks 2, 3 will be described below. It is assumed that server 301 
is added at the same time that intermediate device 200 is introduced. It is 

1 0 also assumed that conf igurational settings and execution detail settings with 
respect to the intermediate device providing services to be provided by 
intermediate device 200 have been registered in advance in intermediate 
device 200 by the operator such as the system administrator. The 
information set and registered by the operator is managed by intermediate 

15 device providing service management unit 203. 

An environment to which procedure 2 is applied is an environment in 
which service inherent information required for intermediate device 200 to 
transfer communication packets can be acquired directly from client 100 or 
server 300 using the existing protocol. In this case, intermediate device 200 

20 attempts to acquire the required Information directly from client 100 and 
server 300. 

Fig. 4 is a flowchart showing the flow of a process carried out when 
the intermediate device is introduced according to procedure 2. The 
procedure shown in Fig. 4 begins when a session has already been 
25 established between client 100 and server 300 and they have been 
communicating with each other through networks 2, 3. 
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Intermediate device providing service management unit 203 
generates a list of service inherent information that is required to be acquired 
to perform intermediate device providing services (hereinafter referred to as 
"required service inherent Information list") from service settings specified by 
5 the operator, and registers the required service inherent information list in 
information collecting unit 206 (step S10). 

Intermediate device 200 and server 301 are now newly connected to 
network switch 1 50. The system now takes on the physical arrangement 
shown in Fig. 1 . 

10 Then, information collecting unit 206 inquires at client 100 and servers 

300, 301 for service inherent information described in the required service 
inherent information list generated by intermediate device providing service 
management unit 203. The inquiry is made using the protocol that has been 
provided in advance in client 100 and servers 300, 301 . Information 

15 collecting unit 206 sends the obtained service inherent information in 
association with the event of the information processing service that has 
been provided from servers 300, 301 to client 100, to intermediate device 
providing service management unit 203 (step S1 1). The information is saved 
in intermediate device providing service management unit 203. 

20 Then, intermediate device providing service management unit 203 

determines whether all the Information set forth in the acquired service 
inherent information list could have been acquired from client 100 or servers 
300, 301 or not (step S12). 

If all the required information could have been acquired, then 

25 intermediate device providing service management unit 203 generates 

transfer rules for appropriately transferring data of communication packets to 



which the intermediate device providing services are applied, from the saved 
service inherent information and service settings specified by the operator, 
and registers the transfer rules in packet transfer control unit 202 (step S13). 
If all the required information could not have been acquired in step 
5 S12, then intermediate device providing service management unit 203 
acquires service inherent information according to operator's input 
instructions (step S15), generates transfer rules for appropriately transferring 
data of communication packets, from the acquired service inherent 
information and service settings specified by the operator, and registers the 

10 transfer rules in packet transfer control unit 202 in step S1 3. If required 
service inherent information cannot even be registered by the operator's 
input, then the intermediate device providing services cannot be provided. 

The route in which communication packets are transmitted between 
client 100 and server 300 is changed from a route extending from client 100 

1 5 directly to server 300 to a route extending from client 1 00 through 

intermediate device 200 to server 300. At this time, a process depending on 
the configurations of the networks connected to network switch 150, which 
are provided by changing settings of network switch 150 and changing the IP 
address of intermediate device 200 or server 300, is employed. 

20 After communication packets are sent to packet transfer control unit 

202 of intermediate device 200, the communication packets from client 100 
are transferred to server 300 or server 301 according to the transfer rules at 
the same time that the intermediate device providing services begin (step 
S14). 

25 (Procedure 3) 

As with procedures 1 , 2, a procedure for introducing intermediate 
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device 200 seamlessly when a session has already been established 
between client 100 and server 300 and they have been communicating with 
each other through networks 2, 3 will be described below. It is assumed that 
server 301 is added at the same time that Intermediate device 200 is 
5 introduced. It is also assumed that configurational settings and execution 
detail settings with respect to the intermediate device providing services to 
be provided by intermediate device 200 have been registered in advance in 
intermediate device 200 by the operator such as the system administrator. 
The information set and registered by the operator is managed by 

10 intermediate device providing service management unit 203. 

An environment to which procedure 3 is applied is an environment 
which employs, among various communication protocols, a protocol having a 
function to recover the state of a session that has been nullified by a sudden 
fault of a client or a server. The communication protocols of this type have a 

15 function to reestablish a session between a client and a server upon 
recovery from a fault of the client or the server after a session has been 
nullified by the fault, and to recover the state of the session to a state prior to 
the occurrence of the fault. The present procedure is effective when a 
communication protocol which is incapable of acquiring required state 

20 information from the contents of communication packets in an already 

established session is employed. Even in this case, intermediate device 200 
reestablishes a session and acquires required state information in the 
process of reestablishing the session, thereby seamlessly starting 
intermediate device providing services. 

25 Fig. 5 is a flowchart showing the flow of a process carried out when 

the intermediate device is introduced according to procedure 3. The 
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procedure shown in Fig, 5 begins when a session has already been 
established between client 100 and server 300 and they have been 
communicating with each other through networks 2, 3. 

Intermediate device providing service management unit 203 
5 generates a list of information that is required to be acquired to perform 
services (hereinafter referred to as "required Information list") from service 
settings specified by the operator, and registers the required information list 
in session monitoring unit 204 (step S20). 

Intermediate device 200 and server 301 are now newly connected to 

10 network switch 150. The system now takes on the physical arrangement 
shown In Fig. 1 . The route in which communication packets are transmitted 
between client 100 and server 300 is changed from a route extending from 
client 100 directly to server 300 to a route extending from client 100 through 
intermediate device 200 to server 300. At this time, a process depending on 

15 the configurations of the networks connected to network switch 1 50, which 
are provided by changing settings of network switch 150 and changing the IP 
address of intermediate device 200 or server 300, Is employed. 

Then, intermediate device 200 sends a command for nullifying or 
initializing a session from session cancellation control unit 205 to client 1 00 

20 and server 300 (step S21). The command for nullifying or initializing a 
session Is issued In order to reestablish a session. 

Having received the command, client 100 and server 300 attempts to 
establish a new session according to a session recovery function. If 
intermediate device 200 collects communication packets between client 100 

2 5 and server 300 in a session recovery process, then intermediate device 200 
can acquire all session information from the beginning of the process of 
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establishing a session. The session information is collected by session 
monitoring unit 204, and the collected session information is registered in 
intermediate device providing service management unit 203 (step S22). 
Intermediate device providing service management unit 203 
5 generates transfer rules for appropriately transferring communication 

packets to which the intermediate device providing services are applied, from 
service settings specified by the operator, and registers the transfer rules in 
packet transfer control unit 202 (step S23). At this time, intermediate device 
providing service management unit 203 sends the session information 
10 acquired in step S22 as auxiliary information for packet transfer to packet 
transfer control unit 202. 

Then, intermediate device providing service management unit 203 
establishes sessions between client 100 and both servers 300, 301 , and 
transfers data between the different sessions according to the transfer rules. 
15 (Procedure for removing the intermediate device) 

A procedure for removing intermediate device 200 seamlessly from 
the state in which intermediate device 200 is temporarily introduced between 
client 100 and servers 300, 301 as shown in Fig. 1 will be described below. 
Fig. 6 is a flowchart showing the flow of a process carried out when 
20 the intermediate device is removed, 

By way of example, it is assumed that intermediate device 200 is 
temporarily introduced to shift a service provided by server 300 to server 301 
without causing the client to be aware of the shifting of the service. In order 
not to cause the client to be aware of the shifting of the information 
25 processing service between the servers, intermediate device 200 can 
replace the service of server 300 with the service of server 301 while 
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integrating the information processing services of server 300 and server 301 . 
When the shifting of the information processing service between the servers 
is completed, intermediate device 200 is removed. 

As shown In Fig. 6, after the service that has been provided by server 
5 300 is shifted to sen/er 301 by intermediate device 200 (step S30), 
intermediate device 200 is removed. 

When packet transfer control unit 202 of intermediate device 200 
receives a communication pacl<et from client 100, packet transfer control unit 
202 determines whether it is a communication packet for requesting a new 
10 session to be established or not (step S31). 

If the communication packet from client 100 is a communication 
packet for requesting a new session to be established, then intermediate 
device 200 exempts the communication packet from the application of the 
intermediate device providing services, transfers the communication packet 
15 directly to new server 301 , and does not establish a session by itself (step 
S32). A new session is now established directly between client 100 and 
sen/er 301 without the intervention of intermediate device 200. 

If the communication packet from client 100 is a communication 
packet of an existing session, then intermediate device 200 applies the 
20 intermediate device providing services to the communication packet, and 
transfers data between two sessions, i.e., a session between client 100 and 
intermediate device 200 and server 300 or server 301 as before (step S33). 
Control then goes back to step S31 . 

After step S32, packet transfer control unit 202 determines whether all 
2 5 sessions are exempted from the application of the intermediate device 
providing services or not (step S34). Since a session is normally not 
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continued for an indefinite period of time, all sessions will eventually be 
exempted from the application of the intermediate device providing services. 

If all sessions are exempted from the application of the Intermediate 
device providing services, then the route of communication packets is 
5 changed to a route which does not extend through intermediate device 200 
(step S35). If there are sessions left subject to the intermediate device 
providing services in step S34, then control goes back to step S34 and 
intermediate device 200 continues the intermediate device providing services 
until all sessions become exempted from the application of the Intermediate 

1 0 device providing services. 

After step S35, intermediate device 200 is disconnected from the 
network and brought into a removable state. 

As described above, intermediate device 200 continues to apply the 
intermediate device providing services to the existing session until the 

1 5 session is finished, exempts a new session from the intermediate device 
providing services , and is judged as being in a removable state when all 
sessions become exempted from the application of the intermediate device 
providing services. Therefore, intermediate device 200 can be removed from 
between client 100 and servers 300, 301 without causing both the user of the 

20 existing session and the user of the new session to be aware of the removal 
of intermediate device 200. 
{1 St embodiment} 

A first embodiment in which the intermediate device according to the 
present invention is applied to a generally used NFS protocol environment 

2 5 will be described below. The intermediate device providing services are that 
accesses from an NFS client to a plurality of NFS servers are integrated to 
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cause the user of the NFS client to be unaware of the number and 
configurations of NFS servers. 

(Seamless introduction of the intermediate device in NFS protocol 
environment) 

5 An example in which the intermediate device is introduced seamlessly 

into an environment wherein NFS servers provide an information processing 
service capable of providing access to their own storage resources according 
to the NFS protocol will be illustrated. The intermediate device serves to 
Integrate the storage resources of a plurality of NFS servers and provide 

1 0 them to an NFS client. 

Fig. 7 is a block diagram showing an arrangement of a system 
according to a first embodiment of the present invention. Fig. 7 shows the 
arrangement of the system in which an intermediate device and a newly 
added NFS server have been introduced. The system according to the first 

15 embodiment has NFS client 101 , intermediate device 200, NFS servers 302, 
303, and network switch 150. Although one or two units of each device are 
illustrated in Fig. 7, the number of units of each device Is optional. 

Each of NFS client 101 , intermediate device 200, and NFS servers 
302, 303 has an interface for network connections in order to communicate 

20 with other devices. Intermediate device 200 is connected to network 1 , NFS 
client 101 to network 2, NFS server 302 to network 3, and NFS server 303 to 
network 4. Networks 1 through 4 are connected to respective ports of 
network switch 150. This configuration of the system allows client 101 , 
intermediate device 200, and NFS servers 302, 303 to communicate with 

25 each other. 

NFS servers 302, 303 can provide a information processing service to 
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NFS client 101 through the networks. The information processing service 
provided by NFS servers 302, 303 is a service for allowing the client to 
access storage resources, and will be referred to as "data access service". 

NFS Client 101 can access NFS servers 302, 303 and use the data 
5 access service provided by NFS servers 302, 303. 

Network switch 150 and intermediate device 200 are the same as 
those shown in Figs. 1 and 2. 
(Introducing procedure) 

A procedure for introducing intermediate device 200 and NFS server 
10 303 seamlessly in an environment wherein NFS client 101 and NFS server 
302 are communicating with each other according to the NFS protocol will be 
described below. Networks 2, 3 are assigned respective IP addresses such 
that they are in the same network domain, and NFS client 101 and NFS 
server 302 communicate with each other through networks 2, 3 according to 
15 the NFS protocol. 

Intermediate device providing service management unit 203 
generates a list of service inherent information that is required to perform 
services (hereinafter referred to as "required service inherent information 
list") from service settings specified by the operator, and registers the 
20 required service inherent information list in information collecting unit 206. 

In this situation, network 1 of intermediate device 200 and network 4 
of NFS server 303 are connected to network switch 150. After networks 1, 4 
are assigned respective IP addresses such that they are in the same 
network domain as networks 2, 3, networks 1 , 4 are activated. Network 
2 5 settings are also made for intermediate device 200 and NFS server 303. 

After networks 1 , 4 are activated, new NFS server 303 activates a 
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data access service for providing the client with access to its own storage 
resources, making it possible to access the storage resources according to 
the NFS protocol. 

After the network settings have been made for intermediate device 
6 200 and NFS server 303, information collecting unit 206 of intermediate 
device 200 collects service inherent Information required to Integrate the 
data access services provided by NFS server 302 and NFS server 303 
according to the NFS protocol, from NFS server 302 and NFS server 303 
according to the NFS protocol. 
10 Integrating data access services refers to access from NFS client 101 

through intermediate device 200 so that NFS server 302 and NFS server 303 
will be provided as a single NFS server, i.e., a single storage resource, to the 
client. 

To realize the above integration, intermediate device 200 determines 
15 a request destination from an access request from NFS client 1 01 , and 

transfers a request to an NFS server which stores a resource as the request 
destination. 

According to the NFS protocol, an identifier called a file handle 
generated by an NFS server is used as an ID for uniquely Identifying a data 
20 object to be accessed, such as a directory or a file. When an NFS client 
uses a data access service, the request from the NFS client necessarily 
includes a file handle. 

Intermediate device 200 can easily identify an NFS server as a 
transfer destination by incorporating the identifiers of NFS servers that are 
25 integrated by intermediate device 200 into respective file handles. 

If NFS client 101 and NFS server 302 have already been 
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communicating with each other before intermediate device 200 is introduced, 
then there is an original file handle generated by NFS server 302. In order 
for intermediate device 200 to be introduced seamlessly, intermediate device 
200 has to use the original file handle continuously as it is. Therefore, 
5 intermediate device 200 has to identify NFS server 302 or NFS server 303 as 
a transfer destination for a request from the original file handle that is 
included in the request. 

Although a process of generating a file handle is generally optional, it 
is usually patterned by the mounting of each NFS server, A generated file 

10 handle contains information of a file system storing data objects and 

information of stored devices. These items of Information comprise a data 
string which is common to file handles in the same NFS server. If 
intermediate device 200 can extract the regularity of the pattern that is 
common to a plurality of file handles, then intermediate device 200 can use it 

15 as an identifier for identifying an NFS server (hereinafter referred to as 

"server identifier") for transferring communication packets to the NFS server. 
Specifically, if a server identifier capable of identifying a server having a data 
object is extracted from a file handle which represents information identifying 
the data object, then the server identifier can be used as service inherent 

20 information. Intermediate device 200 needs to identify a destination server 
from a file handle of a data object in order to transfer data of communication 
packets in the intermediate device providing services. If a server identifier 
can be extracted, then intermediate device 200 does not need to acquire and 
record ail existing file handles, and can identify a destination server simply by 

25 seeing the server identifier that is contained in part of the file handle. As a 
result, intermediate device 200 can realize the intermediate device providing 
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services with a reduced amount of processing and a reduced storage 
capacity. 

Tlie data length of an NFS file handle is variable or fixed in each NFS 
server. For example, if the data lengths of file handles are different between 
5 NFS servers, then the data lengths can be used as sen/er identifiers for 
transferring communication packets to the NFS servers. 

Intermediate device 200 acquires a plurality of file handles from NFS 
server 302 and NFS server 303 according to the NFS protocol, and extracts 
server identifiers required to integrate data access services from the 
10 acquired file handles and the file handle generating process described 
above. 

Fig. 8 is a table showing an example of file handles of NFS servers 
according to the NFS protocol. The file handle table 400 shown in Fig. 8 
shows a list of data patterns of file handles of two NFS servers A, B. 
15 According to the list of NFS server A, third to sixth digits from the left 

of all the data patterns represent "cfde" common to all the file handles. 
According to the list of NFS server B, third to sixth digits from the left of all 
the data patterns represent "0000" common to all the file handles. This 
indicates that intermediate device 200 may extract the data of the third to 
20 sixth digits as server identifiers capable of identifying servers. 

If intermediate device 200 cannot extract sen/er identifiers based on 
certain patterns or certain data lengths from the file handles acquired from 
NFS server 302 and NFS server 303, then intermediate device 200 acquires 
all the file handles from NFS sen/er 302 and NFS sen/er 303, associates the 
' 25 file handles and the NFS servers in a table, and holds the table. When 

intermediate device 200 receives a communication packet from NFS client 
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101 , intermediate device 200 checks a file handle included in the 
conDmunication packet against the table to identifies an NFS server as a 
transfer destination. 

In intermediate device 200, original file handles of NFS servers which 
5 are contained in communication packets according to the NFS protocol are 
registered in packet transfer control unit 202 for identifying appropriate NFS 
servers from the original file handles, and transfer rules for intermediate 
device providing services for integrating data access services are registered 
from intermediate device providing service management unit 203 into packet 

10 transfer control unit 202, Thereafter, intermediate device 200 starts the 
intermediate device providing services. Subsequently, network settings are 
changed to route communication packets from client 101 through 
intermediate device 200. In the embodiment shown in Fig. 7, the IP address 
assigned to network 3 of NFS server 302 is assigned to network 1 of 

1 5 intermediate device 200, and the IP address of network 3 is changed to 
another IP address. The IP address of network 3 is registered in 
intermediate device 200 as the address of a transfer destination for 
communication packets destined for NFS server 302. According to the 
setting change, the route is changed for routing communication packets 101 

20 necessarily through intermediate device 200. 

Generally, the NFS protocol employs a TCP or a UCP (Unified 
Datagram Protocol) as a transport layer corresponding to a lower layer 
thereof. 

According to the TCP, it is generally necessary to avoid a mismatch of 
25 information such as sequence numbers so that intermediate device 200 will 
continue a TCP session. Unless such a mismatch of information is avoided, 
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A TCP session will be cut off. According to the NFS protocol, however, since 
the TCP is controlled independently of the NFS protocol, the control of the 
NFS protocol which is a higher protocol over the TCP is not affected even If 
a TCP session is cut off except for some exceptional instances. According 
5 to the UDP, there is no such concept as sessions in the UDP itself. 

According to the TCP, therefore, when the transfer destination for 
communication packets Is changed from NFS server 302 to intermediate 
device 200, the session between NFS client 101 and NFS serer 302 before 
intermediate device 200 is introduced may be cut off, and a new session 

10 may be reestablished between intermediate device 200 and client 101 . 
According to the UDP, when the transfer destination for communication 
packets is changed from NFS server 302 to intermediate device 200, 
intermediate device 200 may transfer communication packets from NFS 
client 101 as they are to NFS server 302. With respect to the protocol of the 

15 transport layer, as described above, intermediate device 200 can handle 
communication handles without giving rise to a mismatch under the control 
of the NFS protocol. 

In an exceptional instance, if an NFS file system is soft-mounted 
according to the TCP, then when a session is cut off, the NFS client detects 

2 0 the session cutoff as an error. Therefore, if there is an NFS file system 
which is soft-mounted according to the TCP, then after the NFS client is 
registered in advance in intermediate device 200 by the operator, 
intermediate device 200 is introduced. Then, session monitoring unit 204 
acquires session information of a TCP session of the soft-mounted NFS 

2 5 client according to a port mirroring function of network switch 1 50, and 
intermediate device providing service management unit 203 generates 
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transfer rules and registers the transfer rules in packet transfer control unit 
202. 

As described above, a communication packet from NFS client 101 
contains an original file handle generated by NFS server 302. Packet 
5 transfer control unit 202 determines a transfer destination by referring to a 
table registering certain patterns of file handles extracted from file handle 
Information acquired from NFS server 302 and NFS sen/er 303 or all file 
handles of NFS server 302 and NFS server 303. 

If the protocol of the transport layer is the TCP, then Intermediate 

10 device 200 establishes a new TCP session between itself and NFS server 
302 with packet transfer control unit 202, or takes over a session of the soft- 
mounted NFS client according to the generated transfer rules, and transfers 
communication packets from NFS client 101 to NFS server 302. If the 
protocol of the transport layer is the UDP, then intermediate device 200 

15 transfers communication packets from NFS client 101 as they are to NFS 
server 302 with packet transfer control unit 202. 

After intermediate device 200 has started a service integrating data 
access services as the intermediate device providing services, when 
intermediate device 200 receives a communication packet from client 101, 

20 packet transfer control unit 202 can determine either NFS server 302 or NFS 
server 303 as a transfer destination based on regulations (contents) of the 
integrated service which have been set by the operator, using the original file 
handles generated by the respective NFS servers, and transfer 
communication packets to the determined transfer destination. 

25 NFS client 101 thus can access a single NFS server without concern 

over the existing two NFS servers including NFS server 302 and NFS server 
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303. In other words, the introduction of intermediate device 200 and the 
Integration of data access services as the intermediate device providing 
services of intermediate device 200 are carried out seamlessly with respect 
to NFS client 101. 
5 {2nd embodiment} 

A second embodiment In which the intermediate device according to 
the present invention is applied to an NLM (Network Lock Manger) protocol 
environment will be described below. The contents of the Intermediate 
device providing services are the same as those of the first embodiment. 
10 (Seamless introduction of the intermediate device In NLM protocol 
environment) 

An example in which Intermediate device 200 is introduce seamlessly 
between NFS client 101 and NFS server 302, as with the first embodiment, 
will be described below. 

15 The NLM protocol is a protocol for providing a file lock function, and is 

normally used in an environment which employs the NFS protocol. Since the 
NFS protocol does not have a lock function, the NLM protocol makes up for 
a lock function. In an environment which employs the NFS protocol and the 
NLM protocol, file locks are saved as state information in the NFS servers 

2 0 and the NFS client in order to lock files. 

In order to introduce the intermediate device seamlessly into the 
environment and continue the lock control of the NLM protocol without a 
mismatch, the intermediate device needs to recognize all the locked state 
information before the intermediate device is Introduced. 

25 The NLM protocol has a command for inspecting locks on files as a 

function for knowing locked states of files. Before intermediate device 200 
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enters the network between NFS client 101 and NFS server 302, 
intermediate device 200 can successively acquire locked state information of 
respective files provided by NFS server 302 in advance, using the command. 
If the number of files managed by NFS server 302 is vast, then it is time- 
5 consuming to acquire all the locked state information. While the locked state 
information of respective files is being acquired, the locked state of an 
acquired file may possibly change. Therefore, it is difficult for intermediate 
device 200 to accurately recognize the locked state information of all files at 
the time intermediate device 200 is introduced, with a lock inspection 

10 command. 

In readiness for a reboot of an NFS server after a fault, the NLM 
protocol has a function to recover the locked state information which has 
been effective before the NFS server is rebooted. Furthermore, in readiness 
for a reboot of an NFS client after a fault, the NLM protocol has a function to 

15 discard the locked state information which has been held by an NFS server. 
Intermediate device 200 uses these functions to recognize the locked states 
before it is introduced. 
(Introducing procedure) 

Since the NLM protocol is generally used in an environment which 

2 0 employs the NFS protocol, the system is of the same configuration as the 
first embodiment as shown in Fig. 7. 

Intermediate device providing sen/ice management unit 203 
generates a list of sen/ice inherent information that is required to perform 
intermediate device providing services (hereinafter referred to as "required 

25 service inherent information list") from service settings specified by the 
operator, and registers the required service inherent information list in 
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session monitoring unit 204. 

As with the first embodiment, Intermediate device 200 and NFS server 
303 are connected to network switch 150, and network settings are changed. 
Then, information collecting unit 206 acquires a list of NFS clients which are 
making file accesses to NFS server 302 from NFS server 302, and sends the 
list of NFS clients to intermediate device providing service management unit 
203. The client list is a list of lOP addresses and computer names of NFS 
clients, and can be acquired using a command (MOUNT DUMP) according 
to a MOUNT protocol which is necessarily used with the NFS protocol. 

After the client list is acquired, the IP address is changed as with the 
first embodiment, so that communication packets which would normally be 
sent to NFS server 302 will be sent to intermediate device 200. After the 
route change setting is made, intermediate device providing service 
management unit 203 sends the NFS client list to session cancellation 
control unit 205, sends a notification indicating that NFS server 302 is 
regarded as being rebooted and the locks which have been effective before 
NFS server 302 is rebooted are nullified, to NFS clients 101 which are 
included in the client list. The notification is sent according to a command 
(SM__NOTIFY) that Is available in an SM (Status Monitor) protocol used with 
the NLM protocol. Actually, NFS server 302 is not rebooted, but 
intermediate device 200 sends the SM NOTIFY command as a dummy 
command in order to know the locked state of NFS server 302. 

Having receiving the SM_NOTIFY command, NFS client 101 sends a 
re-lock request for re-locking all the files which have been locked to NFS 
server 302 in order to recover the locked state which has been effective 
immediately before intermediate device 200 is introduced. 



37 



As the re-lock request is set to intermediate device 200, session 
monitoring unit 204 acquires all the locked states into which the files of NFS 
server 302 have been placed by NFS client 101 , from the contents of the re- 
lock request, and registers the acquired locked states in session cancellation 
5 control unit 205. 

Session cancellation control unit 205 sends a command 
{SM_NOTIFY) indicating that NFS client 101 is rebooted to NFS server 302. 
Actually, NFS client 101 is not rebooted, but intermediate device 200 sends 
the SM^NOTIFY command as a dummy command in order to clear the 

10 locked states held by NFS server 302. The locked state information held In 
NFS server 302 is cleared. Then, session cancellation control unit 205 
sends the re-lock request from NFS client 101 to NFS server 302 based on 
the registered locked state information. The locked state information is 
registered in intermediate device providing service management unit 203 

1 5 from files whose locks are properly held. 

By way of example, intermediate device 200 sends the SM_NOTIFY 
command indicating that NFS client is rebooted according to the SM protocol 
to NFS server 302. However, intermediate device 200 may instead employ a 
command (NLM^FREEALL) for nullifying all locks held by a request source, 

20 which Is available In the NLM protocol. The latter command may be used to 
nullify all locks held by NFS server 302. 

According to the above sequence of operation, intermediate device 
200 can acquire all the lock state information which has been effective 
immediate prior to the introduction of intermediate device 200. Intermediate 

25 device 200 can thus match the locked states recognized by itself and the 
actual locked states in NFS server 302. 
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The locked state information wfiich is recognized by intermediate 
device providing service management unit 203 of intermediate device 200 is 
used as one of the intermediate device providing services. For example, 
intermediate device 200 may shift data between NFS server 302 and NFS 
5 server 303 for the purposes of smoothing the storage capacities of the NFS 
servers and distributing access loads, according to one of the intermediate 
device providing services. In such a case, the process of shifting data 
should preferably be carried out in a manner concealed from NFS client 101 , 
and the destination to which the data are shifted needs to recreate the same 

10 locked state as in the source from which the data are shifted. Therefore, 
intermediate device providing service management unit 203 reflects the 
locked state information in the transfer rules for transferring NLM packets, 
and registers the locked state information as auxiliary information for packet 
transfer in packet transfer control unit 202. 

15 {3rd embodiment} 

A third embodiment in which the intermediate device according to the 
present invention is applied to a CIFS protocol environment will be described 
below. The contents of the intermediate device providing services are the 
same as those of the first and second embodiments. 

20 (Seamless introduction of the intermediate device in CIFS protocol 
environment) 

It is assumed that the intermediate device is Introduced for the 
purpose of integrating the storage resources of a plurality of CIFS servers. A 
new CIFS server is introduced, and the intermediate device integrates the 
25 existing CIFS sen/er and the newly introduced CIFS server. 

Fig. 9 is a block diagram showing an arrangement of a system 
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according to a third embodiment of the present invention. Fig. 9 shows the 
arrangement of the system in which intermediate device 200 and newly 
added CIFS server 305 have been introduced. 

As shown in Fig. 9, the system according to the present embodiment 
5 has CIFS client 102, intermediate device 200, CIFS servers 304, 305, and 
network switches 150, 151 . CIFS server 305 is a newly introduced CIFS 
server. Although one or two units of each device are illustrated in Fig. 9, the 
number of units of each device is optional. 

Each of CIFS client 102, intermediate device 200, and CIFS servers 
10 304, 305 has an interface for network connections In order to communicate 
with other devices, intermediate device 200 is connected to network 1 and 
network 5, CIFS client 102 to network 2, CIFS server 304 to network 3, and 
CIFS server 305 to network 4. Networks 1 through 3 are connected to 
network switch 150, and networks 4, 5 to network switch 151 . This 
15 configuration of the system allows CIFS client 1 02, intermediate device 200, 
and CIFS servers 304, 305 to communicate with each other. 

CIFS servers 304, 305 can provide a information processing service 
to CIFS client 102 through the networks. The information processing service 
provided by CIFS servers 304, 305 is a service for allowing the client to 
20 access storage resources, and will be referred to as "data access service". 

CIFS Client 102 can access CIFS servers 304, 305 and use the data 
access service provided by CIFS servers 304, 305. 

Network switch 150 Is the same as network switch 151 . Network 
switch 150 and intermediate device 200 are the same as those shown in 
25 Figs. 1 and 2. 

(Introducing procedure) 
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A procedure for introducing intermediate device 200 seamlessly in the 
networks between CIFS client 102 and CIFS server 304 in a situation 
wherein a session according to the CIFS protocol is established between 
CIFS client 102 and CIFS server 304 and CIFS client 102 and CIFS server 
5 304 are communicating with each other will be described below. 

It is assumed that CIFS client 102 and CIFS server 304 have 
established a sessiorr through networks 2, 3 connected to network 150 and 
have been communicating with each other. Then, network 1 of intermediate 
device 200 is connected to network switch 150, and network 5 of 
10 intermediate device 200 and network 6 of CIFS server 350 are connected to 
network switch 151. 

Then, network 4 of CIFS server 350 is assigned an IP address such 
that is it in the same network domain as network 2 and network 3. Network 
settings are made for intermediate device 200 so that intermediate device 
15 200 will function as a network bridge between network 1 and network 5, and 
the networks are put into operation. 

After network settings are made for intermediate device 200 and CIFS 
server 305, network 3 of CIFS server 304 is disconnected from network 
switch 150 and connected to network switch 151. 
20 With the connection of network 3 being thus changed, communication 

packets from CIFS client 102 according to the CIFS protocol are sent 
through network 1 , intermediate device 200, network 5, and network 3 to 
CIFS server 304. 

According to the CIFS protocol, for identifying a user who has 
25 established a session, the user is authenticated between CIFS client 102 
and CIFS server 304, and thereafter an user ID which is effective only in the 



41 



session is assigned by CIFS server 304. The user ID represents information 
which prevents a user name and a password as authentication information of 
the user from being acquired by the third party. Therefore, even when 
intermediate device 200 collects communication packets between CIFS 
5 client 102 and CIFS server 304, intermediate device 200 is unable to identify 
user information in the session which has been established before 
intermediate device 200 is introduced. Intermediate device 200 thus handles 
the session which has been established before intermediate device 200 is 
introduced, as being exempted from the intermediate device providing 
10 services. 

In a session newly established from CIFS client 102 after intermediate 
device 200 is introduced, intermediate device 200 can acquire user 
authentication information from communication packets that are sent and 
received when the session is established. Intermediate device 200 can also 

15 acquire, without omission, session information such as locked states of files 
of CIFS servers by acquiring communication packets that are sent and 
received when the session is established according to the CIFS protocol. 
Using these items of information, Intermediate device 200 can establish a 
session between itself and a CIFS server, and change a CIFS server as a 

20 connection destination from CIFS client 102 based on the rules of the 

intermediate device providing services. In this manner, Intermediate device 
200 handles the session which is newly established after intermediate device 
200 is introduced, as being exempted from the intermediate device providing 
services. 

25 Consequently, in intermediate device 200, intermediate device 

providing service management unit 203 handles the session which has been 



42 



established before intermediate device 200 is introduced, as being exempted 
from the intermediate device providing services, in addition to the pacl<et 
transfer rules based on service settings specified by the operator, and 
transfers communication packets thereof to a CIFS server. Intermediate 
5 device providing service management unit 203 also handles the session 
which is established after intermediate device 200 is introduced, as being 
exempted from the intermediate device providing services, and registers 
transfer rules for transferring communication packets thereof to a CIFS 
. server in packet transfer control unit 202. Therefore, intermediate device 

10 200 can handle the session which has been established before intermediate 
device 200 is introduced without interruptions. Accordingly, intermediate 
device 200 can be introduced seamlessly. 
{4th embodiment} 

A fourth embodiment in which the intermediate device according to 

15 the present invention is applied to an online shopping site will be described 
below. The intermediate device providing services are a service for 
integrating WEB services provided by a plurality of WEB servers and 
providing them as a single WEB service to the user of a WEB client. For 
example, the sen/ice allows the user to purchase and pays for goods sold at 

20 a plurality of online shopping sites in one access. 

(Seamless introduction of the intermediate device in online shopping site 
environment) 

The intermediate device is introduced for the purpose of integrating a 
plurality of WEB services running online shopping sites to integrate the 
25 individual shopping site and showing them as a single shopping site. 

Fig. 10 is a block diagram showing an arrangement of a system 



43 



according to a fourth embodiment of the present invention. The present 
system has intermediate device 200, at least two WEB servers 306, 307, 
payment server 308, at least one WEB client 103, and network switch 150. 

WEB client 103 can access the server group shown in Fig. 10 from 
5 network 2 through Internet 7, and acquires WEB contents from the WEB 
servers and displays information. 

WEB servers 306, 307 are connected to network switch 150 through 
networks 3, 4. WEB servers 306, 307 provide WEB contents up to the 
selection of goods in online shopping to WEB client 103, and manage 
10 information of WEB client 103 and selected good information in association 
with each other as one session. WEB servers 306, 307 then send the 
session information to payment server 308. 

Payment server 308 is a WEB server connected to network switch 
150 through network 5. Payment server 308 receives the session 
1 5 information from WEB servers 306, 307, and provides WEB contents for 
selecting a payment method and a delivery method for the goods to WEB 
client 103. 

It is assumed that WEB client 103 does not perform a log*in process 
for identifying individuals and encrypted communications between itself and 
20 WEB servers 306, 307, and performs a log-in process and encrypted 
communications when it accesses payment server 308. 

Network switch 150 and intermediate device 200 are the same as 
those shown in Figs. 1 and 2. 

When WEB client 103 accesses online shopping sites and selects 
25 goods in the above system, intermediate device 200 provides WEB client 
103 with intermediate device providing services for integrating online 
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shopping sites of WEB server 306 and WEB server 307 and allowing WEB 
client 103 to select goods in both the online shopping sites of WEB server 
306 and WEB server 307. 

It is also assumed that settings have been made in intermediate 
5 device 200 by the operator who runs online shopping sites, for integrating 
the online shopping sites of WEB server 306 and WEB server 307. For 
example, settings are made to add goods provided by WEB server 307 to 
goods selection pages provided by WEB server 306, and display information 
of the added goods. 

1 0 (Introducing procedure) 

A procedure for introducing intermediate device 200 seamlessly in the 
networks between WEB client 103 and WEB server 306 in a situation 
wherein a session is established between WEB client 103 and WEB server 
306 and WEB client 1 03 and WEB server 306 are communicating with each 

1 5 Other will be described below. 

It is assumed that WEB client 103 and WEB server 306 have 
established a session through networks 2, 3 connected to network 150 and 
have been communicating with each other. Then, network 1 of intermediate 
device 200 is connected to network switch 150. 

20 In intermediate device 200, intermediate device providing service 

management unit 203 generates a list of information that is required to 
perform services (hereinafter referred to as "required information list") from 
service settings specified by the operator, and registers the required 
information list in session monitoring unit 204. The required information list 

25 includes session IDs and goods numbers. The session IDs are identifiers for 
identifying respective sessions in session information between WEB client 
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103 and WEB server 306. The goods numbers are numbers representing 
goods selected by the WEB client from the goods provided by WEB server 
306. 

After the required information list is determined, intermediate device 
5 200 is newly connected to network switch 150. The system now takes on the 
physical arrangement shown in Fig. 10. 

Network switch 150 has been set to transfer communication packets 
flowing between networks 2. 3 to network 1 of intermediate device 200, using 
the function to copy and transfer communication packets. When 
10 communication packets are transferred to intermediate device 200, data 
packets reach session monitoring unit 204 through network interface 201 . 

Session monitoring unit 204 analyzes session information transmitted 
in the existing session that has been established between client 100 and 
server 300, and extracts the session ID and the goods numbers of all goods 
15 selected by WEB client 1 03 from the session information, and sends the 
session ID and the goods numbers to intermediate device providing service 
management unit 203. 

If all the ID and the goods numbers in the session that has been 
established prior to the introduction of the intermediate device can be 
20 acquired from the session information, then intermediate device providing 
service management unit 203 generates transfer rules for appropriately 
transferring communication packets from the acquired information and 
service settings specified by the operator, and registers the generated 
transfer rules in packet transfer control unit 202. The transfer rules are rules 
25 for integrating the WEB contents of WEB server 306 and WEB server 307 
when WEB client 103 requests URL addresses of the WEB contents for 
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displaying a list of goods. According to the transfer rules, when the WEB 
contents of WEB server 306 are requested, the WEB contents of the goods 
list of WEB server 307 are acquired and integrated with the contents of WEB 
server 306, and they are sent back as a single package of WEB contents to 
5 WEB client 103. 

When the transfer rules are generated, the route of communication 
packets flowing on the session is changed from a route extending from WEB 
client 1 03 directly to WEB server 306 to a route extending from client WEB 
103 through intermediate device 200 to WEB server 306. At this time, a 

1 0 process depending on the configurations of the networks connected to 
network switch 150, which are provided by changing settings of network 
switch 150 and changing the IP address of intermediate device 200 or WEB 
server 306, is employed. 

When communication packets are routed through intermediate device 

1 5 200, the communication packets that are sent on the session established 
between WEB client 103 and WEB server 306 go through network interface 
201 to packet transfer control unit 202 in intermediate device 200. 
Intermediate device 200 establishes a new session between itself and WEB 
server 306, transfers data of communication packets sent from WEB client 

20 1 03 using the newly established session, and maintains the session based 
on the session information acquired in advance so that the session 
established before Intermediate device 200 is introduced will not be cut off. 

Furthermore, intermediate device providing service management unit 
203 newly adds transfer rules to packet transfer control unit 202 in order to 

25 match the session information between WEB client 103 and intermediate 
device 200 and the session information between intermediate device 200 
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and WEB server 306. The transfer rules refer to rules for using the session 
ID generated between WEB client 103 and WEB server 306 in the session 
between WEB client 103 and intermediate device 200 and performing a 
conversion between the session ID between intermediate device 200 and 
5 WEB client 103 and the session ID between intermediate device 200 and 
WEB server 306. 

After all the sessions established before intermediate device 200 is 
introduced have started being routed through intermediate device 200 and 
the session between WEB client 103 and intermediate device 200 and the 

10 session between intermediate device 200 and WEB server 306 have been 
matched, intermediate device providing service management unit 203 
instructs packet transfer control unit 202 to make the pre-registered transfer 
rules effective, starting the intermediate device providing services. 

After the intermediate device providing services have started to be 

15 provided, when WEB client 103 requests WEB contents of a certain URL, 
intermediate device 200 establishes a new session between itself and WEB 
server 307 according to the transfer rules for contents integration, acquires 
desired WEB contents, also acquires WEB contents from WEB server 306, 
and integrate the acquired WEB contents. After intermediate device 200 

20 describes information indicating that already selected goods have already 
been selected, in the WEB contents, intermediate device 200 sends the 
Integrated WEB contents back to WEB client 103. At this time, the 
communication data are replaced between three sessions including sessions 
between WEB client 103 and Intermediate device 200, between intermediate 

25 device 200 and WEB server 306, and between intermediate device 200 and 
WEB server 307, maintaining the sessions. 
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When WEB client 103 request a payment process, intermediate 
device 200 sends a payment request to WEB servers 306, 307, and receives 
session IDs and goods number information sent from WEB server 306 and 
WEB sen/er 307 to payment server 308. Intermediate device 200 then 
5 transfers the session IDs of sessions established by the client prior to the 
introduction of the intermediate device, and goods numbers from WEB 
servers 306, 307 altogether to payment server 308. Intermediate device 200 
sends WEB contents including URLs of WEB contents of payment server 
308 back to WEB client 103. 
1 0 Intermediate device 200 does not take part in communications 

between payment server 308 and WEB client 103. 
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